CentOS Update for krb5-devel CESA-2010:0343 centos5 i386

# SPDX-FileCopyrightText: 2011 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_xref(name:"URL", value:"http://lists.centos.org/pipermail/centos-announce/2010-May/016688.html");
  script_oid("1.3.6.1.4.1.25623.1.0.880624");
  script_version("2024-02-05T05:05:38+0000");
  script_tag(name:"last_modification", value:"2024-02-05 05:05:38 +0000 (Mon, 05 Feb 2024)");
  script_tag(name:"creation_date", value:"2011-08-09 08:20:34 +0200 (Tue, 09 Aug 2011)");
  script_tag(name:"cvss_base", value:"4.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:N/I:N/A:P");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2024-02-02 16:52:02 +0000 (Fri, 02 Feb 2024)");
  script_xref(name:"CESA", value:"2010:0343");
  script_cve_id("CVE-2010-0629");
  script_name("CentOS Update for krb5-devel CESA-2010:0343 centos5 i386");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'krb5-devel'
  package(s) announced via the referenced advisory.");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2011 Greenbone AG");
  script_family("CentOS Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/centos", "ssh/login/rpms", re:"ssh/login/release=CentOS5");
  script_tag(name:"affected", value:"krb5-devel on CentOS 5");
  script_tag(name:"insight", value:"Kerberos is a network authentication system which allows clients and
  servers to authenticate to each other using symmetric encryption and a
  trusted third party, the Key Distribution Center (KDC).

  A use-after-free flaw was discovered in the MIT Kerberos administration
  daemon, kadmind. A remote, authenticated attacker could use this flaw to
  crash the kadmind daemon. Administrative privileges are not required to
  trigger this flaw, as any realm user can request information about their
  own principal from kadmind. (CVE-2010-0629)

  This update also fixes the following bug:

  * when a Kerberos client seeks tickets for use with a service, it must
  contact the Key Distribution Center (KDC) to obtain them. The client must
  also determine which realm the service belongs to and it typically does
  this with a combination of client configuration detail, DNS information and
  guesswork.

  If the service belongs to a realm other than the client's, cross-realm
  authentication is required. Using a combination of client configuration and
  guesswork, the client determines the trust relationship sequence which
  forms the trusted path between the client's realm and the service's realm.
  This may include one or more intermediate realms.

  Anticipating the KDC has better knowledge of extant trust relationships,
  the client then requests a ticket from the service's KDC, indicating it
  will accept guidance from the service's KDC by setting a special flag in
  the request. A KDC which recognizes the flag can, at its option, return a
  ticket-granting ticket for the next realm along the trust path the client
  should be following.

  If the ticket-granting ticket returned by the service's KDC is for use with
  a realm the client has already determined was in the trusted path, the
  client accepts this as an optimization and continues. If, however, the
  ticket is for use in a realm the client is not expecting, the client
  responds incorrectly: it treats the case as an error rather than continuing
  along the path suggested by the service's KDC.

  For this update, the krb5 1.7 modifications which allow the client to trust
  such KDCs to send them along the correct path, resulting in the client
  obtaining the tickets it originally desired, were backported to krb 1.6.1
  (the version shipped with Red Hat Enterprise Linux 5.5). (BZ#578540)

  All krb5 users should upgrade to these updated packages, which contain
  backported patches to correct these issues. All running KDC services must
  be restarted for the update to take effect.");
  script_tag(name:"solution", value:"Please install the updated packages.");
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");
  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";

if(release == "CentOS5")
{

  if ((res = isrpmvuln(pkg:"krb5-devel", rpm:"krb5-devel~1.6.1~36.el5_5.2", rls:"CentOS5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"krb5-libs", rpm:"krb5-libs~1.6.1~36.el5_5.2", rls:"CentOS5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"krb5-server", rpm:"krb5-server~1.6.1~36.el5_5.2", rls:"CentOS5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"krb5-workstation", rpm:"krb5-workstation~1.6.1~36.el5_5.2", rls:"CentOS5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"krb5", rpm:"krb5~1.6.1~36.el5_5.2", rls:"CentOS5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}